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DETAILED ACTION 

1 . Claim 1 -7, 9-11,1 3-20, and 22-26 are pending in this office action, claims 8, 1 2, 
and 21 are canceled and claims 24-26 are newly added. 

2. Applicant's arguments, filed November 22, 2005, have been fully considered and 
are persuasive. 

Rejections 

3. The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 

Claim Rejections - 35 USC § 103 

4. Claims 1-23 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Thomas et al. (U.S. Patent No. 6,529,992) in view of McCown et al. (U.S. Patent No. 
6,708,272). 

Regarding claims 1.13. and 23 , Thomas et al. teaches a portable device for 
engaging a host computing device comprising: 

• A body (fig. 2); 

• A memory within the body containing (fig. 2, ref. num 52): 
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o Initial identification indicia to initially identify the portable device to the host 
computing device as a first device type in which a driver for the first device 
type is known to the host computing device (col. 5, lines 25-44); 

o Cleansing indicia providing instructions for the host computing device to 
remove at least certain information from the host computing device 
indicative of use of the host computing device while associated with the 
portable device (fig. 3, ref. num 228-234); and 
• An interface associated with the memory and adapted to facilitate interaction with 
the host computing device (fig. 2, ref. num 102), 

o Wherein the host computing device will detect the portable device as 
being the first device type and configure itself to interact with the portable 
device to provide the application for the applications running on the host 
computing device (col. 4, lines 8-16). 

Thomas et al. does not teach software instructions to subsequently identify the 
portable device as a cryptographic service provider/second device type to the host 
computing device and provide a driver for the cryptographic service provider to allow the 
host computing device to effectively interact with the portable device to provide 
cryptography services for applications running on the host computing system, and 
wherein the host computer further configures itself to provide cryptographic services for 
the applications running on the host computing device. 
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McCown et al. teaches software instructions to subsequently identify the portable 
device as a cryptographic service provider/second device type to the host computing 
device and provide a driver for the cryptographic service provider to allow the host 
computing device to effectively interact with the portable device to provide cryptography 
services for applications running on the host computing system (col. 4, lines 12-23), and 
wherein the host computer further configures itself to provide cryptographic services for 
the applications running on the host computing device (col. 4, lines 56-67). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine subsequently identifying the portable device as a 
second type/cryptographic service provider, and configuring the host to provide the 
cryptographic services to applications on the host, as taught by McCown et al. , with the 
device of Thomas et al. It would have been obvious for such modifications because 
configuring the host computer to run the applications from the portable device allows a 
user to maintain everything he or she needs, while using a portable disk (see col. 4, 
lines 8-16 of Thomas et al.). The added benefit of cryptography services provided to 
the host computing device allows an end-to-end encryption of data to ensure all data is 
stored encrypted (see abstract of McCown et al.). 



Regarding claim 2 , Thomas et al. as modified by McCown et al. teaches wherein 
the memory further contains service indicia providing instructions to provide a service 
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corresponding the cryptographic service provider (see col. 5, lines 59-65 of McCown 
et al.)- 

Regarding claims 3 and 14 , Thomas et al. as modified by McCown et al. teaches 
wherein the service indicia includes instructions for the host computing device to 
provide the service for applications running on the host computing device (see col. 4, 
lines 8-16 of Thomas et al.). 

Regarding claims 4 and 16 , Thomas et al. as modified by McCown et al. teaches 
further comprising a processing unit associated with said memory and wherein the 
service indicia includes configuration instructions for said processing unit to provide the 
cryptography service for the host computing device (see fig. 2, ref. num 106 of Thomas 
et al.). 

Regarding claim 5 , Thomas et al. as modified by McCown et al. teaches wherein 
the configuration indicia includes a file executable on the host computing device to 
reconfigure the host computing device to recognize and interact with the portable device 
as the cryptographic service provider (see fig. 4 of Thomas et al. and col. 5, lines 59- 
65 of McCown et al.). 
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Regarding claim 6 . Thomas et al. as modified by McCown et al. teaches wherein 
the memory further contains an application to run on the host computing device (see 
col. 4, lines 8-16 of Thomas et al.). 

Regarding claims 7 and 18 . Thomas et al. as modified by McCown et al. teaches 
wherein the first device type is a storage device (see col. 5, lines 25-44 of Thomas et 
al.). 

Regarding claim 9 . Thomas et al. as modified by McCown et al. teaches wherein 
said memory further contains at least one of the group consisting of private 
cryptography key, public cryptography key, and cryptography algorithm (see col. 4, lines 
24-44 of McCown et al.). 

Regarding claim 10 . Thomas et al. as modified by McCown et al. teaches 
wherein the interface is one of the group consisting of electrical, optical, and radio 
frequency (see fig. 2, ref. num 102 of Thomas et al.). 

Regarding claims 1 1 and 20 . Thomas et al. as modified by McCown et al. 
teaches wherein the memory further contains deregistering indicia providing instructions 
for the host computing device to reconfigure the host computing device to a 
configuration state prior to interacting with the portable device (see col. 9, lines 35-46 of 
Thomas et al.). 
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Regarding claim 15 , Thomas et al. as modified by McCown et al. teaches 
wherein the configuration instructions to provide the cryptography services are 
configured for running on the host computing device (see col. 5, lines 59-65 of McCown 
et al.). 

Regarding claims 17 and 22 , Thomas et al. teaches a method comprising: 

• Identifying a portable device to a host computing device as a first device type, 
which is known to the host computing device (col. 5, lines 25-44); 

• Registering the portable device with the host computing device as the first device 
type (fig. 4); and 

• Removing at least certain information from the host computing device 
indicative of use of the host computing device while associated with the 
portable device (fig. 3, ref. num 228-234). 

Thomas et al. does not teach automatically identifying the portable device to the 
host computing device as a cryptographic service provider/second device type; enabling 
the portable device as the cryptographic service provider/second device type with the 
host computing device based on information provided on the portable device; and 
providing cryptography services for applications running on the host computing device 
based on the information provided by the portable device. 
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McCown et al. teaches automatically identifying the portable device to the host 
computing device as a cryptographic service provider/second device type (col. 4, lines 
12-23); enabling the portable device as the cryptographic service provider/second 
device type with the host computing device based on information provided on the 
portable device (col. 4, lines 12-23); and providing cryptography services for 
applications running on the host computing device based on the information provided by 
the portable device (col. 4, lines 56-67). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine identifying the portable device as a cryptographic 
service provider, enabling the portable device as a cryptographic service provider, and 
providing cryptography for applications running on the host computer, as taught by 
McCown et al. , with the method of Thomas et al. It would have been obvious for such 
modifications because configuring the host computer to run the applications from the 
portable device allows a user to maintain everything he or she needs, while using a 
portable disk (see col. 4, lines 8-16 of Thomas et al.). The added benefit of 
cryptography services provided to the host computing device allows an end-to-end 
encryption of data to ensure all data is stored encrypted (see abstract of McCown et 
al.). 
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Regarding claim 19 , Thomas et al. as modified by McCown et al. teaches 
wherein the second device type is a cryptographic service provider (see fig. 1 , ref. num 
24 of McCown et al.). 



Regarding claim 24 , Thomas et al. as modified by McCown et al. teaches 
wherein the body and memory are integrally formed with one another such that the 
memory is not readily removed form the body (see fig. 2 of Thomas et al., all 
components are sealed in a single package). 



Regarding claim 25 , Thomas et al. as modified by McCown et al. teaches 
wherein the memory contains at least four megabytes of flash memory (see col. 4, lines 
44-56 of Thomas et al., Zip disks are well known to have more than 4 MB's of memory). 



Regarding claim 26 , Thomas et al. as modified by McCown et al. teaches 
wherein the cleansing indicia includes instructions to de-register the cryptographic 
service provider so as to prevent access to selected functions, services, and drivers 
after the portable device has been removed (see col. 9, lines 35-46 of Thomas et al.). 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Brandon S. Hoffman whose telephone number is 571- 
272-3863. The examiner can normally be reached on M-F 8:30 - 5:00. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on 571-272-3795. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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